[MDEV-4326] Server crashes in append_query_string on 2nd execution of a PS with string in LIMIT via API Created: 2013-03-25 Updated: 2018-10-01 Resolved: 2013-05-13 |
|
| Status: | Closed |
| Project: | MariaDB Server |
| Component/s: | None |
| Affects Version/s: | 10.0.1, 5.5.30, 5.1.67, 5.2.14, 5.3.12 |
| Fix Version/s: | 10.0.3, 5.5.31, 5.1.73, 5.2.15, 5.3.13 |
| Type: | Bug | Priority: | Critical |
| Reporter: | Elena Stepanova | Assignee: | Oleksandr Byelkin |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | upstream | ||
| Attachments: |
|
||||||||
| Issue Links: |
|
||||||||
| Description |
|
Stack trace from:
Also reproducible on all of current MariaDB 5.1-10.0, MySQL 5.1-5.6. Test case:
|
| Comments |
| Comment by Elena Stepanova [ 2013-03-26 ] |
|
general log: /data/bzr/5.5/sql/mysqld, Version: 5.5.30-MariaDB-debug (Source distribution). started with: |
| Comment by Oleksandr Byelkin [ 2013-03-28 ] |
|
Attached 'diff' is my unsuccessful attempt to repeat the bug via C API. |
| Comment by Elena Stepanova [ 2013-03-29 ] |
|
Sanja, I think you forgot bind.buffer_type=MYSQL_TYPE_STRING; after the second prepare. |
| Comment by Oleksandr Byelkin [ 2013-03-29 ] |
|
Somehow string of zero length passed to the parameter binding inside server. |
| Comment by Elena Stepanova [ 2013-04-09 ] |
|
As discussed, refiled it for MySQL as http://bugs.mysql.com/bug.php?id=68890 Upd: |
| Comment by Oleksandr Byelkin [ 2013-04-09 ] |
|
fix committed. |
| Comment by Oleksandr Byelkin [ 2013-04-09 ] |
|
please, review |
| Comment by Oleksandr Byelkin [ 2013-05-10 ] |
|
pushed to 5.1 |
| Comment by Sergei Golubchik [ 2013-05-13 ] |
|
pushed in 5.1 |